Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f91452f7-539b-3f8b-ab36-49dcbd006744.roa
File:                     f91452f7-539b-3f8b-ab36-49dcbd006744.roa (raw, json)
Hash identifier:          OQNayALFtRYlO3O9WeCHMPeZD6RIXRT0LFDw8bFklv4=
Subject key identifier:   BA:C9:EC:0F:A7:42:DB:DA:17:10:48:8B:A9:16:64:4D:E5:53:7B:F7
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584BA9327DCF93E02F8DB3E15180
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f91452f7-539b-3f8b-ab36-49dcbd006744.roa
Signing time:             Mon 27 Oct 2025 13:00:38 +0000
ROA not before:           Mon 27 Oct 2025 13:00:38 +0000
ROA not after:            Sun 25 Jan 2026 14:00:38 +0000
asID:                     13335
IP address blocks:        162.159.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:32:7d:cf:93:e0:2f:8d:b3:e1:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct 27 13:00:38 2025 GMT
            Not After : Jan 25 14:00:38 2026 GMT
        Subject: CN=b7869f17-b637-4783-b34d-8f56886990bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f9:fb:cb:0d:c3:0f:ac:2c:57:87:73:7a:bc:
                    24:56:28:32:11:85:a6:60:09:5e:07:cf:81:83:17:
                    a9:d0:25:75:59:a6:29:e9:ee:45:f1:cd:4e:e7:68:
                    2b:13:5e:01:0f:12:f4:db:c6:9c:11:3f:a8:a4:af:
                    95:c9:9a:6d:3c:3f:c2:21:8c:d3:5c:c3:6f:86:be:
                    3e:2a:50:d6:76:23:15:bc:6e:dc:64:83:8a:16:44:
                    55:a8:cc:3a:3f:46:65:bb:10:e2:38:de:52:9f:e2:
                    aa:0e:cb:20:c2:b9:e9:16:cc:18:2b:e3:d3:79:4e:
                    d3:55:77:2a:7f:f6:b5:a4:93:e7:39:61:8d:af:1b:
                    49:09:42:1f:11:dc:ff:59:87:3a:f0:16:d3:43:02:
                    bd:bb:dd:b1:cd:e8:73:4a:b0:83:25:b3:a8:6f:99:
                    6c:6f:63:07:b9:5f:90:70:cb:c2:cd:b6:36:44:dd:
                    a8:2c:9f:0a:b6:16:9e:b6:45:b7:cc:b4:84:04:74:
                    84:b5:3b:17:6c:3a:96:6d:e4:c2:fb:fe:ae:a9:a7:
                    ae:01:ae:68:01:0c:29:e7:e1:5e:03:a3:c1:54:71:
                    a6:4d:bd:9c:58:b7:d4:5e:33:36:b4:9c:31:8c:0d:
                    2e:fe:40:5b:69:48:4b:32:9b:6b:7a:94:c0:40:b5:
                    8f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C9:EC:0F:A7:42:DB:DA:17:10:48:8B:A9:16:64:4D:E5:53:7B:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f91452f7-539b-3f8b-ab36-49dcbd006744.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.159.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:80:0f:60:9e:e7:d1:fb:f1:05:ca:1b:1b:d8:7b:7a:a6:b7:
         68:0b:b8:b9:b7:e1:2e:5e:0f:ff:70:c0:83:43:2e:13:28:93:
         a3:be:e8:a1:4b:7e:b0:19:c6:07:de:2e:7f:6c:e9:d0:e2:2e:
         35:7b:d6:b5:b6:ff:d9:de:fd:1b:90:b3:c2:41:a0:4c:cb:4a:
         e1:87:6d:4e:64:6c:a8:d6:29:cf:19:26:80:cf:5b:bd:fb:83:
         b0:7f:b8:1e:7e:13:89:dd:9f:eb:a4:3b:14:27:0c:e3:12:44:
         25:c0:b2:e8:d5:f2:08:f2:1b:2e:22:d2:fa:80:f9:dc:de:a4:
         04:1a:85:2d:ea:c1:80:62:36:81:12:96:da:bc:dc:d4:16:55:
         f9:4c:1c:3b:35:c5:61:64:f8:5d:1d:d2:32:7f:d9:0d:c5:a1:
         f6:44:12:1a:eb:5a:b1:c8:d7:04:17:b5:15:87:19:f6:f4:5d:
         9a:4e:09:65:c9:05:6f:f2:bb:65:51:4e:cb:c5:58:90:12:98:
         d0:18:76:86:2d:1b:09:da:42:67:79:f6:db:b8:fc:27:ca:16:
         bd:0b:24:21:f4:e4:c4:03:e2:ec:4b:52:36:8b:d8:7a:e9:87:
         94:0d:73:ee:0b:d5:76:58:86:7d:2e:b2:71:7b:79:06:f2:97:
         36:a4:e8:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMn3Pk+AvjbPhUYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk
Yjc4NjlmMTctYjYzNy00NzgzLWIzNGQtOGY1Njg4Njk5MGJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPn7yw3DD6wsV4dzerwkVigyEYWmYAleB8+B
gxep0CV1WaYp6e5F8c1O52grE14BDxL028acET+opK+VyZptPD/CIYzTXMNvhr4+
KlDWdiMVvG7cZIOKFkRVqMw6P0ZluxDiON5Sn+KqDssgwrnpFswYK+PTeU7TVXcq
f/a1pJPnOWGNrxtJCUIfEdz/WYc68BbTQwK9u92xzehzSrCDJbOob5lsb2MHuV+Q
cMvCzbY2RN2oLJ8KthaetkW3zLSEBHSEtTsXbDqWbeTC+/6uqaeuAa5oAQwp5+Fe
A6PBVHGmTb2cWLfUXjM2tJwxjA0u/kBbaUhLMptrepTAQLWP0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLrJ7A+nQtvaFxBIi6kWZE3lU3v3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjkxNDUyZjctNTM5Yi0z
ZjhiLWFiMzYtNDlkY2JkMDA2NzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop/PMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAiAD2Ce59H78QXKGxvYe3qmt2gLuLm34S5eD/9wwINDLhMok6O+6KFL
frAZxgfeLn9s6dDiLjV71rW2/9ne/RuQs8JBoEzLSuGHbU5kbKjWKc8ZJoDPW737
g7B/uB5+E4ndn+ukOxQnDOMSRCXAsujV8gjyGy4i0vqA+dzepAQahS3qwYBiNoES
ltq83NQWVflMHDs1xWFk+F0d0jJ/2Q3FofZEEhrrWrHI1wQXtRWHGfb0XZpOCWXJ
BW/yu2VRTsvFWJASmNAYdoYtGwnaQmd59tu4/CfKFr0LJCH05MQD4uxLUjaL2Hrp
h5QNc+4L1XZYhn0usnF7eQbylzak6Jw=
-----END CERTIFICATE-----
Generated at Sun Nov 2 04:23:05 2025 by rpki-client